$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7af1a353-fbf1-38cc-bb5d-9e83ce23ac7f.roa File: 7af1a353-fbf1-38cc-bb5d-9e83ce23ac7f.roa (raw, json) Hash identifier: jE5mrebOMzf3eh7TrWmhcXE1SXVzy5IJQ2x05cfJnjc= Subject key identifier: 11:7D:AD:2B:0F:31:83:48:5D:1B:6D:6F:68:AC:A4:27:9F:6F:4A:5C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D59EA63F3326C8E08C899BA80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7af1a353-fbf1-38cc-bb5d-9e83ce23ac7f.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 3223 IP address blocks: 172.111.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:63:f3:32:6c:8e:08:c8:99:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=fa5d67ca-ab17-4e5a-9474-3baf42f0b547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ed:84:ec:75:7c:0c:74:6f:d1:c3:0b:10:ab: a5:5c:94:21:c2:2d:48:31:d1:a0:38:ef:4c:4c:6e: 7f:ab:2e:78:69:0b:b8:d2:33:9a:60:a5:4c:dd:8b: e5:a6:26:97:7f:82:89:ec:9a:08:73:a2:22:8b:4d: 25:fe:1e:f4:6a:00:d0:0f:f0:44:b1:e8:8d:22:47: c9:82:4b:e2:87:7e:5b:6d:37:65:36:34:12:f9:44: 38:40:46:7f:36:90:d8:2b:10:19:d6:a7:a0:73:b0: 6a:48:7f:b4:0d:84:90:f0:cf:7c:30:18:1f:f5:d9: a6:b1:5b:ac:e0:cd:3b:07:8a:9e:b2:94:37:9a:d9: e9:79:b8:8f:fe:16:cd:a0:3e:cf:d7:27:50:af:24: 92:e1:a4:3d:09:82:b5:40:36:21:3f:1e:c7:11:72: ea:6f:a8:31:e6:75:32:40:31:09:86:60:06:6b:49: 87:62:b6:1f:51:95:29:fb:28:b9:7d:60:28:43:ab: 8f:49:af:a5:21:0f:49:9d:36:20:f1:7a:0a:5b:cd: c1:33:c5:01:1c:c8:4e:63:61:4d:b8:85:d6:9e:c4: 58:66:71:ea:c9:50:23:3b:b2:a6:5f:c0:e5:77:01: db:7f:87:83:6d:55:aa:35:8d:76:e3:c4:f4:51:cd: 4a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7D:AD:2B:0F:31:83:48:5D:1B:6D:6F:68:AC:A4:27:9F:6F:4A:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7af1a353-fbf1-38cc-bb5d-9e83ce23ac7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:50:19:c6:ba:6e:bd:46:40:8a:61:a3:5c:6f:b2:93:b0:7f: cf:97:1e:57:60:a7:01:83:de:fe:37:0f:05:c0:10:e9:ad:d4: 33:03:f0:e8:1d:61:e5:dd:b4:69:e5:24:59:a2:65:4d:d2:84: 81:8f:2b:d6:e0:2f:2b:fb:d0:97:4c:0d:12:c4:6d:b6:82:ac: eb:68:a0:1b:0b:ed:c2:9a:b4:a6:90:1d:0b:ed:df:82:e0:0b: 86:8d:29:f8:cc:e7:24:07:88:1f:13:4b:bb:1d:98:61:01:ea: 4b:27:69:fc:bb:68:16:63:3b:7d:26:eb:df:60:e3:83:f9:b1: 05:e5:e0:16:59:ec:6d:bd:8d:c3:cd:74:7c:a3:2e:32:db:dd: e7:ad:72:f5:79:2b:e0:5f:99:59:45:df:ed:47:0a:0c:40:f6: 2b:24:59:2f:1f:f5:a3:5c:10:cf:09:96:f9:93:9e:26:cc:48: 94:20:04:1c:6f:b5:19:56:59:73:6b:09:63:27:33:f2:ae:e1: 81:48:15:d9:e0:9f:fa:f6:35:6a:16:de:03:c4:b3:87:da:4f: 01:fd:b9:bd:2a:6e:7b:82:68:1d:d5:63:d7:d1:92:10:7e:c2: 45:aa:79:55:d4:20:d3:5e:8b:fc:db:7e:50:85:06:65:1c:56: 23:4a:35:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mPzMmyOCMiZuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZmE1ZDY3Y2EtYWIxNy00ZTVhLTk0NzQtM2JhZjQyZjBiNTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+2E7HV8DHRv0cMLEKulXJQhwi1IMdGgOO9M TG5/qy54aQu40jOaYKVM3YvlpiaXf4KJ7JoIc6Iii00l/h70agDQD/BEseiNIkfJ gkvih35bbTdlNjQS+UQ4QEZ/NpDYKxAZ1qegc7BqSH+0DYSQ8M98MBgf9dmmsVus 4M07B4qespQ3mtnpebiP/hbNoD7P1ydQrySS4aQ9CYK1QDYhPx7HEXLqb6gx5nUy QDEJhmAGa0mHYrYfUZUp+yi5fWAoQ6uPSa+lIQ9JnTYg8XoKW83BM8UBHMhOY2FN uIXWnsRYZnHqyVAjO7KmX8DldwHbf4eDbVWqNY1248T0Uc1KzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBF9rSsPMYNIXRttb2ispCefb0pcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvN2FmMWEzNTMtZmJmMS0z OGNjLWJiNWQtOWU4M2NlMjNhYzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBQGca6br1GQIpho1xvspOwf8+XHldgpwGD3v43DwXAEOmt1DMD8Ogd YeXdtGnlJFmiZU3ShIGPK9bgLyv70JdMDRLEbbaCrOtooBsL7cKatKaQHQvt34Lg C4aNKfjM5yQHiB8TS7sdmGEB6ksnafy7aBZjO30m699g44P5sQXl4BZZ7G29jcPN dHyjLjLb3eetcvV5K+BfmVlF3+1HCgxA9iskWS8f9aNcEM8JlvmTnibMSJQgBBxv tRlWWXNrCWMnM/Ku4YFIFdngn/r2NWoW3gPEs4faTwH9ub0qbnuCaB3VY9fRkhB+ wkWqeVXUINNei/zbflCFBmUcViNKNS8= -----END CERTIFICATE-----Generated at Fri Apr 17 14:13:00 2026 by rpki-client